Thread: does this netstat info look OK?
does output netstat ok? wondering whether last 3 lines legitimate. not associated process, nor have connection state. should these connection regarded suspicious?
code:~$ netstat -pantu (not processes identified, non-owned process info not shown, have root see all.) active internet connections (servers , established) proto recv-q send-q local address foreign address state pid/program name tcp 0 0 127.0.0.1:631 0.0.0.0:* listen - tcp 0 0 127.0.0.1:25 0.0.0.0:* listen - tcp 1 0 192.168.0.13:49013 119.161.91.18:80 close_wait 1747/clock-applet tcp 1 0 192.168.0.13:49014 119.161.91.18:80 close_wait 1747/clock-applet tcp 1 0 192.168.0.13:49015 119.161.91.18:80 close_wait 1747/clock-applet tcp 1 0 192.168.0.13:49016 119.161.91.18:80 close_wait 1747/clock-applet tcp6 0 0 ::1:631 :::* listen - tcp6 0 0 ::1:25 :::* listen - udp 0 0 0.0.0.0:68 0.0.0.0:* - udp 0 0 0.0.0.0:5353 0.0.0.0:* - udp 0 0 0.0.0.0:51466 0.0.0.0:* -
looks fine.
if want see process listening on port can run this:
code:sudo netstat -nlp
Forum The Ubuntu Forum Community Ubuntu Specialised Support Security does this netstat info look OK?
Ubuntu
Comments
Post a Comment